iOS APN profile installation fails on supervised iPad with MDM restrictionsSolved

Hi @maevee ,

This happens because iOS handles manual configuration profile installation differently on supervised, MDM-managed devices. Even if the restriction to allow configuration profile installation is enabled, manually installing a carrier-provided APN profile through the iPad UI can still run into iOS profile management restrictions or conflicts with enforced MDM policies.

The recommended approach is to deploy the APN through Hexnode instead of asking users to install the profile manually. This avoids the profile installation UI entirely and allows the APN to be installed silently over the air.

You can use either of these methods:

1. Configure the APN payload in Hexnode

• Go to Policies.
• Create or edit an iOS policy.
• Navigate to Network > APN.
• Enter the APN details provided by the carrier.
• Save the policy and assign it to the iPad.

2. Deploy the carrier .mobileconfig file as a custom configuration

• Go to Policies > iOS > Configurations > Deploy Custom Configuration.
• Upload the carrier-provided .mobileconfig file.
• Save the policy and assign it to the required iPad.

If the carrier has provided a ready-made APN .mobileconfig file, the second method is often the easiest option. Hexnode will install it as a managed configuration profile, without requiring the user to open and install it manually on the device.

Regards,
Isabel Lora
Hexnode UEM

So enabling “Install configuration profile” under restrictions is not enough for this scenario? I assumed that would allow the user to install the APN file manually.

That setting controls whether users can access the manual profile installation flow from the device UI. However, it does not guarantee that every manually downloaded profile can be installed successfully on a supervised, MDM-managed iPad.

For carrier APN profiles, it is better to treat the profile as a managed configuration and deploy it from Hexnode. That way, iOS receives it through the MDM channel instead of through the user-initiated profile installation workflow.

Regards,
Isabel Lora
Hexnode UEM